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FF2 Summary 



MORPHEUS 



• On August 9 th , 2012, the Morpheus 1.5 Vertical Testbed (VTB) crashed during 
Free Flight 2 (FF2) at KSC SLF, resulting in the loss of 1.5 VTB hardware. 

• JSC/KSC Morpheus team immediately executed the pre-rehearsed Emergency 
Action Plan to protect personnel and property, so damage was limited to 1.5 
VTB hardware. 






JSC/KSC Morpheus team secured data and mapped & recovered debris. 
Project had pre-declared loss of VTB to be a test failure, not a mishap. 
Video 
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Sector A 


Secto'r F 


Sector D 


t 2012 Google 




Polar grid set up 
around impact point 

~100 items catalogued: 
mass, radius & bearing 

Remaining items 
weighed by sectors for 
mass distribution 

NESC&KSC Safety will 
use debris catalog to 
anchor blast models 
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Sector G 


Crash site observations 

- Nearly all debris < 50m, 

« 1000ft clear distance for 

Pad Crew (Max estimates: 
JSC = 325ft, KSC = 653ft, 

H WSTF=1000ft) 

- Methane tanks burned 

- LOX tanks exploded (BLEVE), 
+Z tank separated at lower 

Sector B boss & rolled 37m 

- Engine plume dug a small 
crater; chamber burned, but 

injectors recoverable 

- Top deck melted into crater, 
including GN&C plate & SIGI 

or C 

- Onboard camera SD card 
experienced todt much heat 
damage for datjrecovery 

- APU Solid State Disk Drive 
data and DFI box recovered 


Debris Field 


fk 

MORPHEUS 
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FF2 Main Event Timeline 


JVl 

MORPHEUS 


EDT 

MET 

Event 

Status 

06:15 


Pre-test safety briefing & Emergency Action Plan review at SLF hangar 


06:30 


VTB rollout and launch preparation 


12:43 

0:00. 

0 

MMCC Operator commands Execute Ignition Sequence (10 sec auto chill-in + 3.8 sec engine ignition seq) 



0:10. 

0 

Engine ignition sequence begins with igniter spark; 1 st plume visible on video at 11.4 sec 



0:13. 

8 

Prop-to-GNC handover, start of Ascent mode, GNC commands throttle-up to 100% 

• Vehicle lifts off before throttle reaches 100% 

• GNC responds appropriately to initial IMU nav state updates with modest pitch rate & 1.17g accel (typically ~1.2g) 



0:14. 

3 

Throttle reaches 100% (actual thrust lags throttle slightly) 

Nominal 


0:14. 

4 

IMU nav data flow to CPU stops 

• Lacking new IMU data, FSW flags "bad" SIGI data and feeds stale nav data into GNC nav state propagation 

• GNC responds appropriately to static/stale body rates & acceleration with positive pitch correction, steadily pitching 
over VTB, eventually throttling down from 100% to 50% between MET = 15-17 sec 

Failure 


0:17. 

8 

Loss of vehicle telemetry, presumably due to inverted orientation blocking antennas 



0:18. 

4 

Inverted VTB impacts ground next to launch pad and rolls upright 

• Top deck avionics and GNC components damaged 

• Engine continues to burn, digging a crater beneath the vehicle 

• Fire fed by LNG leaking through open throttle valve and severed fuel lines 



0:19 

MMCC Operator sends manual Soft Abort command (no violation of on-board auto Soft Abort limits) 



0:20+ 

MMCC RSO sends Thrust Termination command via independent Flight Termination System (FTS) 
• FTS presumed unable to close throttle valve or open tank vent valves 
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Vibration, Throttle & Altitude 
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Vibe, Throttle, and Altitude vs Time 
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What Didn't Fail? 


Hi 



Power: bus voltage & current data (right) 
show no power loss 

Propulsion 

- Engine performance, tank temp and 
pressure data were nominal 

- EMA position feedback data showed 
nominal tracking of GNC commands 

Structure: video and forensics show no 
evidence of structural failure before impact 

Software 

- Downlinked FSW parameters were 
nominal, responding appropriately 

- MMCC GSW nominal 

Weather and winds benign, within LCC 
Survivors 

- HD4 engine injector plate 

- RCS thruster bodies 

- Javad GPS antenna 

- ALHAT HDS mass simulator 

- FTS boxes ejected, one still operational 

- Footpad insulation made by KSC 

- Morpheus Team expertise! 


FF2 ADIO Bus B and C Voltages vs MET 


GNC/SIGI power bus (C) voltage 


Prr*n/PI\/l A nn\A/or hue x/oI+opio 

1 Hz telem 

r 1 Up/ l_tVI/-\ pUWcrUUo V^/ vUllciyU 

data only 

♦ 


BUS_C High Rate 
— BUS_C downlinked 
BUS_B High Rate 
♦ Bus B Downlinked 
Last Highrate 


♦ 

♦ ♦ 


High-rate & 

1 Hz telemetry data 



♦ 


FF2 ADIO Current forBusB and C vs MET 


BUS_C High Rate 
-BUS_C Downlinked 
BUS_B High Rate 
- BUS_B Downlinked 
-Last High rate 


High-rate & 
1 Hz telemetry data 


GNC/SIGI power bus (C) current 




Prop/EMA pow^r bus (B) current 


AFM MET (sec) 


1 Hztelem 
data only 




What Failed? 



MORPHEUS 



HW failure in IMU data path => loss of nav data to GNC 



Possible Possible Unlikely 


• Hardware failure along IMU data path => loss of navigation data 

- Autonomous VTB GNC requires IMU nav data to correctly propagate nav state & maintain 
stable flight 

- VTB became "blind" during initial ascent, unable to sustain stable flight 

- Available data does not isolate a root cause; no single "smoking gun" 

• Prime suspects: 

- SIGI, source of IMU nav data, hard-mounted (not vibe-isolated by design) 

- 1553 bus, carries SIGI data to APU, mostly hard-mounted, partially vibe-isolated 

- Avionics & Power Unit (APU), contains CPU with GNC FSW, vibe-isolated 
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SIGI Data Timeline 
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SIGI_cfs_time_tag 
(corresponds to 
Nav time) 

Calc. AFM 
MET (sec) 

SIGI_provided_ti 
metag (eo-24) 

A timetag 
from last 1 
sec sample 

sigiMode 

Word 

(health) 

gpsTimeOf 

WeekLSW 

eo24Bus 

Time 

pvtOKMaste 
rAntIDJD 
(GPS ant) 

Event/Comments 

1028565820.477 

0.000 







GNC/AFM Receives Command "Execute Ignition Sequence", AFM MET = 0 

1028565821.190 

0.713 

1028565821.15 


0 

22236 

65238 

1 

Auto chill-in (10 sec) continues toward Engine Ignition Sequence 

1028565822.190 

1.713 

1028565822.15 

1.000 

0 

23236 

15327 

1 

Nominal operations, no failure flags, data changing... 

1028565823.190 

2.713 

1028565823.15 

1.000 

0 

24236 

30952 

1 



10.000 







Start Engine Ignition Sequence (3.8 sec) 

1028565833.190 

12.713 

1028565833.15 

1.000 

0 

34235 

56130 

1 


1028565834.190 

13.713 

1028565834.15 

1.000 

0 

35235 

6219 

1 


1028565834.275 

13.798 







Start Ascent, throttle up cmd from GNC (est from 10Hz data & TT19) 

1028565834.800 

14.323 







Throttle at 100% (50.06mm), 10Hz telem downlink +/- 100 ms 

1028565834.890 

14.413 







Estimated last fresh SIGI data received from 1553 Bus (700 ms later than 
last full second) 

1028565834.910 

14.433 







Estimated First Stale SIGI Data, and subsequent (cfs time) +/-40 ms 

1028565835.190 

14.713 

1028565834.85 

0.700 

0 

35935 

16844 

1 

70% of this 1 Hz frame is fresh data (confirmed with SIGI time & eo24Bus 
Time) 

1028565836.190 

15.713 

1028565834.85 

0.000 

0 

35935 

16844 

1 

Stale data 

1028565837.190 

16.713 

1028565834.85 

0.000 

0 

35935 

16844 

1 

Stale data 

1028565838.190 

17.713 

1028565834.85 

0.000 

0 

35935 

16844 

1 

Stale data, Last 1 Hz SIGI Data point received from vehicle 

1028565838.297 

17.820 







Last Data Transmission from Vehicle 


Notes: 

1 . Last SIGI data indicated no internal failures (sigi Mode Word = 0) and good GPS antenna lock 
(pvtOKMasterAntIDJD = 1) 

2. SIGI I/O SW on CPU flags & sends stale SIGI data to GNC if no new data is received from 1553 Bus 

3. Although STALE flag from SIGI was not downlinked, it can be deduced from stale eo24bustime. 

SIGI did not send stale data, but in fact no more SIGI data was received on the 1553 Bus. 

4. GNC/AFM time is 10ms greater than the IMU_Pre timestamp, from data analysis 
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Why Did Hardware Fail? 
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• Probable or possible causes: 


1. Vibro-acoustic environment near ground repeatedly exceeding component qual limits and 
eventually causing fatigue failure during FF2 

2. Non-flight components not sufficiently robust to environment (1) 

• Lab grade 1553 bus components 

• Development unit CRV SIGI (s/n 1580) believed to be "flight-like" due to same internal part numbers 
as ISS flight units built 2 months later, one of which was used for HTV3 

3. Workmanship Quality Assurance provided insufficient robustness for environment (1) 

4. Production imperfections in primary components reduced robustness to environment (1) 


• Programmatic contributors: 

5. Accepted single-string IMU risk 

• Simulated but did not test FSW down-mode to backup IMU in response to primary IMU failure 

• Discovered backup IMU malfunction and no-opted it shortly before FF2 

• One of a few single-string critical systems (e.g., engine gimbal and throttle valve EMAs) 

6. Accepted risk of brief (first few seconds after ignition on ground) exceedance of ISS SIGI qual 
limits (based on 3 minute vibe tests) due to HF6 (ground environment enveloping case) and 
FF1 test experience 

7. Accepted risk of lower grade components (e.g., 1553 bus) due to availability and zero cost 

8. High operational tempo (partially due to self-imposed FY12 ALHAT HDP milestone schedule 
pressure), risk acceptance & budget limited QA activity and verification testing 




Fault Tree, Top 


MORPHEUS 


1 = Likely 

2 = Possible 

3 = Unlikely 


FF2 EVENT: 

Failure to update inertial 
navigation state data input to 
flight computer leads to 
unstable flight during ascent 
(G036) 


(Fault tree item 
closure rationales 
in Backup section) 


1 


INS data path 
(SIGI/1553/APU) 
failure during ascent 
(G026, l.l.l-l.l.l-l.l.l) 



SIGI failure 
(G037) 


1553 bus failure 
between SIGI & APU 
(G042) 


APU failure to process 
data from SIGI 
(G029) 
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Nav Data Path Components 


JVl 



Inertial 

Sensor 

Assembly 

(Gyros, 

Accels) 


Power 

Converter 


GPS 

(used for time, 
not nav) 


Inertial 

Electronics 


Power 

Supply 


System 

Processing 

Card 


SIGI 


Internal 

cabling 


SIGI 1553 
bus 

connector 


1553 

bus 

cable 


1553 bus 


Verified pin/sockets 
were in place with 
good crimps. Lack of 
continuity may be 
due to melted 
connector. 



1553 bus 

GNC plate to 

coupler on 

harness 55-pin 

GNC plate 

connector 


1553 bus 
cable 


1553 bus 
coupler on 
APU 
exterior 


Loss of SIGI data 
resulted in SIGI I/O 
App reporting 
"stale" SIGI data to 
IMU Pre. 

Loss of SIGI data 
would be caused by 
failure of any box 
upstream/left of this 
red dashed line. 



APU 

Socket 

connector 


Key 


APU Pins 
connector 

Internal 

Cabling 

80 Pin TM 
Connector 

Transition 

module 

APU (vibe-isolated) 


TM/cPCI 

J2 

Connector 




| 

TM/cPCI 

J2 

Connector 

cPCI 

Carrier 

Card 

APU 

1553 IP 1 
Module | 


SIGI 

IM 


I/O 

U 

Nav 

App 

Pre 



Good Continuity 
No Continuity 
Not Tested 



Loss of backplane probably would 
impact other channels, but only 
SIGI channel data was lost 
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APU Inspection and Continuity Testing 
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SrtEtt 


DIO/1553 TM Connector 


DIO/1553 TM 


Backplane looks good 


Wires are firmly in 
connectors but no 


continuity through 
melted connectors 


Card to cPCI 
connection has 
good continuity 


DIO/1553 Card 


1553 Front Panel Pins 
(55 pin connector) 


1553 Front Panel 
Connector (55 pin) 


Crimps and wires have good 
continuity and pass pull test 
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Fault Tree, APU 



MORPHEUS 
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1553 Bus Functional Schematic 


MORPHEUS 


1553 Bus Coupler 


1553 Bus Terminator 


1553 Bus 
Connector 


1553 Bus Connector 


1553 Bus Cable 


SIGI 1553 
Connector 



1553 Bus Cable 


GNC Plate 55-pin 
Connector 


On GNC Plate 


Primary Structure 


Hard-Mounted, Not Vibration Isolated 


1553 Bus Coupler 

1553 Bus 
Connector 



553 Bus Terminator 


1553 Bus Connector 


1553 Bus Cable 


APU 1553 
Connector 



On APU plate 


Vibration Isolated 
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1553 Bus Failure Possibilities 
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• 1553 bus couplers 

- GNC plate coupler hard-mounted to plate, deck & primary structure, not isolated 
from vibration; coupler on APU vibe-isolated. 

— In 2009, L-M Mission Success Bulletin #09-17 cited a few lots of couplers (from a 
different manufacturer) for having cracked solder joints on terminal lugs due to 
vibration & thermal environments, affecting Atlas and Orion PA1 

• 1553 bus connectors 


- Spring-pressure over-center BNC connectors 

— Can be connected without locking if there is sufficient friction in connection; 
unlikely given no connector issues in previous tests, not demated since Feb 

— High vibration environment could cause connectors to back off, even if locked 

• 1553 bus terminators 

- Same unlikely connection issue as connectors, not demated since Feb 

— Long, cantilevered terminators are susceptible to high vibration environment 

Lab grade 1553 bus harnesses may have been susceptible to high vibration. 

VTB 1 .5B will have higher quality 1553 bus harnesses and more vibe isolation. 
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Fault Tree, 1553 Bus 
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1 = Likely 

2 = Possible 

3 = Unlikely 

4 = Highly unlikely 



1553 cable or 
connector failure 
(G056) 


2 


1553 timing latency 
(G031) 


4 


1553 bus coupler 
failure 
(G113, D) 


2 


1553 bus terminator 
failure 
(G114) 


2 


Improper 1553 bus 


1553 data drop due 

termination 


to EMI 

(G115) 


(G047) 


4 3 
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SIGI Components 


& 

MORPHEUS 


Inertial Electronics 


Inertial Sensor Assembly 


(Mounted Under Inertial Electronics) 
ISS SIGI Including Adapter Plate 


DC Power Supply 


Trimble GPS Receiver Module 


System Processor 


ACOCS - 120 VDC Power Conversion 


afrauTHMi 

OCCC 


5IGT 








Fault Tree, SIGI 
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4 = Highly unlikely 
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Accumulated Vibration Time 
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Morpheus 1.0 (2011): 290 sec HD3 Engine Burn Time 



i 

— - :r. 

j 

ijnx 

an 

Ml 


= 

ftk 

UUU 

u 


Hot Fire 1 Hot Fire 2 Tether 1 Tether 2 Tether 3 Tether 4 Tether 5 Tether 6 

April 14 April 19 April 25 April 27 May 3 May 4 June 1 August 31 

103 sec 54 sec 20 sec 13 sec 20 sec 29 sec 40 sec 1 1 sec 



Time in 
High Vibe 
Ground 
Effect (sec) 


14 

14 (1%) 


Morpheus 1.5 (2012): 850 sec HD4 Engine Burn Time 



Hot Fire 5 

Tether 7 

Tether 8 

Tether 9 

Hot Fire 6 

Tether 10 

Tether 11 

Tether 12 

Tether 13 

Tether 14 

February 27 

March 5 

March 13 

March 16 

April 2 

April 5 

April 11 

April 18 

May 2 

May 8 

40 sec 

30 sec 

55 sec 

47 sec 

5 sec 

62 sec 

56 sec 

67 sec 

62 sec 

66 sec 



Tether 15 

Tether 16 

Tether 17 

RCS HF1 

Tether 18 

Tether 19 

May 10 

June 11 

June 18 

July 3 

July 6 

July 1 7 

60 sec 

41 sec 

63 sec 

Methane RCS 

49 sec 

72 sec 


Tether 20 

August 3 
63 sec 


Free Flight 1 Free Flight 2 

August 7 August 9 

Soft abort LOV 
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Vibration Flight Experience 
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100 


Morpheus Free Flight #2 

Top Deck High Frequency Accelerometer Time History 



Y 


Ignition at t = 0 


Morpheus Free Flight #2 


+XM1.5 HF6 14.3 grms 
+XM1.5 FF1 12.8 grms 
+XM1.5 FF2 9.49 grms 
+XM1.5TT20 2.4G grms 
+XM1.5TT19 1.53 grms 


100 


Top Deck High Frequency Accelerometer Time History 



+ZM1.5 HF6 11.8 grms 
+ZM1.5 FF1 8.89 grms 
+ZM1.5 FF2 6.53 grms 
+ZM1.5TT20 1.5 grms 
+ZM1.5TT19 1.31 grms 


100 


Morpheus Free Flight #2 

Top Deck High Frequency Accelerometer Time History 



+Y Ml .5 HF6 8.72 grms 
+Y Ml .5 FF1 6.9 grms 
+Y Ml .5 FF2 4.87 grms 
+Y M1.5TT20 1.89 grms 
+Y M1.5TT19 1.82 grms 


Flight Test Color Key 

HF6 at JSC, chained to ground 
FF1 at KSC, soft abort at 0.3m altitude 
FF2 at KSC, reached 5m altitude 

TT20 at KSC, “launch” at 6m altitude 

TT19 at JSC, “launch” at 6m altitude 


Tether Test ignitions “at altitude” produce far less vibration than HF6 & FF ground ignitions. 
FF2: VTB escaped vibro-acoustic ground effect ~4 sec after ignition, ~1 sec after liftoff. 
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Vibration Flight Levels & IMU Qual Specs, +X 
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10 pr- 


PSD t 

g 2 /Hz 


10 

10 Hz 


- I I 1 1 — I 1 - 

■ > >__I. 


Morpheus Free Flight #2 
Top Deck High Frequency Accelerometer PSD 

I I L L L I I I I - 

' ' I I I ' 1 L _ J _ 


=L==LLL=QuaUiffiitJ 


+X Ml .5 HF6 14.3 grms 

+X Ml .5 FF1 12.7 grms 

+X Ml .5 FF2 9.49 grms 

+X Ml .5 TT20 2.4 grms 

+X Ml .5 TT1 9 1 .46 grms 

-* TBD Envelope 15.6 grms 

<3 — SIGI-ISS Qual 8.6 grms 
— SIGI-PA1 Isolated 31 .4 grms 
SDI500 21 .6 grms 



(Reminder: g rm j = area |u nderR$D curve) 


TT20 


TT19 


10 

100 Hz 


Frequency [Hz] 


10 

1000 Hz 


10 

10000 Hz 


HF6, FF1 & FF2 vibration briefly exceeded ISS SIGI qual limits at high frequencies. 
Vibe-isolated PA1 SIGI has much higher qual limits, above Morpheus test experience. 
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Acceleration [g] Acceleration [g] 



Vibe Isolation Effectiveness in HF6 
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Morpheus HF#6 

High Frequency Accelerometer Time History 



2 3 

Time [s’ 


+XM1.5 HF6 TopDeck 14.3 grms 
+XM1.5 HF6 APU 2.77 grms 


Morpheus HF#6 

High Frequency Accelerometer Time History 



-80 - 

-100 - 
0 


+Y Ml .5 HF6 TopDeck 8.72 grms 
+Y Ml .5 HF6 APU 1.59 grms 


Morpheus HF#6 

High Frequency Accelerometer Time History 



Top Deck accel was hard-mounted. 
APU accel was vibe-isolated. 


Vibe isolation reduced peak 
g’s by an order of magnitude. 


-100 
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Vibe Isolation Effectiveness in HF6 



MORPHEUS 



Morpheus HF 
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Corrective Action 1 


Hi 



# 

Probable or Possible Cause or 
Contributor 

Corrective Action 



1 Vibro-acoustic environment 
near ground repeatedly 
exceeding component limits and 
eventually causing fatigue failure 
during FF2 

<L NOZZLE 



Reduce vibro-acoustic environment 

a. Vibe isolation for key components (e.g., SIGI, backup IMU(s) & 1553 bus) 

• IMU risk: misalignment due to plastic deformation of vibe isolator 

• IMU challenge: attenuate high frequency vibe but not lower FCS frequencies 

b. Relocate IMUs away from center of top deck toward primary structure 

c. Flame trench for ground ignitions at JSC and KSC (assuming feasibility) 

• May increase effective launch altitude by roughly a body length, reducing launch 
vibration by up to an order of magnitude 

• Landing vibration becomes stress case, but is roughly half magnitude of current 
launch vibration due to half throttle, and occurs while descending near 
touchdown 

d. Leverage NASA vibro-acoustic expertise to supplement team experience 






Corrective Actions 2-5 


JVl 

MORPHEUS 


# Probable or Possible Cause or 
Contributor 


2 Non-flight components not 

sufficiently robust to 
environment (1) 


Corrective Action 


3 Workmanship QA provided 
insufficient robustness for 
environment (1) 


4 Production imperfections in 

primary components reduced 
robustness to environment (1) 

5 Accepted single-string IMU risk 


Increase component robustness 

a. Use PA1 SIGI flight unit 

• Designed for high vibration PA1 environment 

• Perhaps more robust than "flight-like" ISS SIGI development unit 

b. Procure higher quality 1553 bus components with greater robustness to 
high vibe environments 

c. Use both channels of 1553 bus 

• Only channel A was used for VTB 1.5 

• 1553 bus will automatically switch between channels A & B as necessary, and 
can report channel usage to CPU 

Improve workmanship quality assurance/control 

a. Crew Chief provides tighter control over vehicle access and components 

b. Wiring/Cabling Subsystem Lead implements best practices (e.g. ; strain 
relief) and focuses upon quality improvements & assurance 

c. Certified wiring technicians for build, installation and inspections 

Improve system quality and verification 

a. Higher quality components (e.g., connectors, cables) 

b. More verification testing (e.g., SIGI vibe testing, tethered liftoff test) 

Dissimilar, non-colocated backup IMU(s) 

a. Test backup IMU down-mode and soft abort logic 

b. LCC requirement for operational backup IMU(s) 
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Corrective Actions 6-8 
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# 

Probable or Possible Cause or 
Contributor 

Corrective Action 

6 

Accepted risk of brief 
exceedance of ISS SIGI qual 
limits due to HF6 and FF1 test 
experience 

(1) Reduce vibro-acoustic environment for IMUs with flame trench, 
vibe isolation and relocation 
(2a) Use PA1 SIGI flight unit 

7 

Accepted risk of lower grade 
components due to availability 
and zero cost 

(2a&b) Use PA1 SIGI & procure higher quality 1553 bus components 

(3) Improve workmanship QA 

(4) Improve system quality and verification 

8 

High operational tempo, risk 
acceptance & budget limited QA 
activity and verification testing 

Incrementally increase project rigor in QA, verification testing and 
risk analysis/mitigation/acceptance, accommodated by more schedule 
margin, while still practicing lean development (not flight program 
rigor) 


Project Morpheus is applying these CA to two new vehicles in fabrication 
in 2012 and to flight testing scheduled to resume at JSC and KSC in 2013. 


“It is not the critic who counts; not the man who points out how the strong man stumbles, or where the doer of deeds could have done them 
better. The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood; who strives valiantly; 
who errs, who comes short again and again, because there is no effort without error and shortcoming; but who does actually strive to do the 
deeds; who knows great enthusiasms, the great devotions; who spends himself in a worthy cause; who at the best knows in the end the 
triumph of high achievement, and who at the worst, if he fails, at least fails while daring greatly, so that his place shall never be with those cold 
and timid souls who neither know victory nor defeat.” 

— Theodore Roosevelt 28 






Oct Nov 

Dec Jan 

Feb 

Mar 

FY 2012 

Apr May 

Jun 

Jul Aug Sep 

ALHAT Helicopter Testing 

^ 12/14 





L] Flights Include ALHAT 



Contributions to RESOLVE plan 


^ 6/30 


Morpheus 1.5C Build 


> 


Integ T&V 


First hot fire for 1.5C 
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Backup 



MORPHEUS 



1. Project Scale of Rigor 

2. Stale SIGI Data Summary 

3. DFI Sensor Locations 

4. KSC Flight Risk Matrix 

5. Morpheus System & VTB Overview 
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Project Scale of Rigor 
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• May or may not use 
guidelines 

• Learn as you go 

• May only implement 
processes after failure 


Rigor 

CM, Requirements, 
Data Management, 
Formal 

Documentation, 

etc. 


Research & 
Development 

Low cost project 
Low consequence of failure 
Easily replaceable hardware 
Little schedule pressure 
Under the radar 


Human Space 
Flight 



NUDGE 



High dollar project 
High reliability required 
Crew safety 
Mission critical 
Expensive payloads 
High visibility 
Schedule constraints 
Costly replacement 
Paying customer 


NASA guidelines: 
NPR 7120. 5d, 
7123.1, 7120.2, 
etc. 


Technology Morpheus Shuttle, ISS, Orion 

Development / R&D 


The scale of project rigor should always be adapted to the needs and scope of 
the project. Some attributes will drive rigor but not equally for all processes. 
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Stale SIGI Data 




MORPHEUS 










DFI Sensor Locations, Top 



MORPHEUS 



Top Deck Triaxial Accel 
(Dytran 3039C) 



DFI Box (EDAQ-Lite, 
20 HF analog channels 


APU Box Triaxial 
(Dytran 3039C) 


Leg# 4 Qty 3 Uniaxial 
(Endevco 2221 F) on triax 
mounting block 


A 


+z 


+x 



Leg# 1 Qty 3 Uniaxial Accels 
(Endevco 2221 F) on triax 
mounting block 
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DFI Sensor Locations, Side 



MORPHEUS 



Top Deck Triaxial Accel (Dytran 3039C) 



mounting block 


LOX Line Pressure Transducer(Kulite 
.CT-1 MA437-500A) 


Leg# 3 Qty 3 Uniaxial Accels 
(Endevco 2221 F) on triax 
mounting block 


Engine Combustion Chamber Pressure 
Transducer (Kulite .CT-1MA437-500A) 


JSC designed/built Charge Amplifier 
Box 

DFI Box (EDAQ-Lite; 

20 HF analog channels) 

APU Box Triax Accel 
(Dytran 3039C) Far Side 


Engine Chamber Flange Triax 
Accel (Dytran 3039C) 
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KSC Flight Test Risks 



MORPHEUS 



# 

Risk 

L 

C 


PERFORMANCE 



PROP-002 

Methane RCS engines cannot provide needed 
performance 

3 

4 

ALHAT-001 

ALHAT does not achieve precision landing performance 

3 

4 

PROP-OOl 

Uncertain main engine performance margin 

2 

5 

SEI-002 

Aero induced torques exceed vehicle control authority 

2 

5 

SEI-003 

HDP objectives not achievable due to insufficient vehicle 
performance 

2 

4 

SEI-004 

Morpheus unable to meet HDS nav error budget 

2 

4 

SEI-001 

Liftoff ground effect damages vehicle hardware (repeated 
shock, vibe, heat) 

2 

3 

PROP-005 

Tank imbalance during flight causes c.g. shift leading to 
control issues 

3 

2 

PROP-003 

High usage of helium RCS degrades engine performance 
due to depressurization 

3 

2 

GNC-004 

Morpheus does not achieve precision landing 
performance 

1 

4 

GNC-001 

Free flight lateral instabilities 

2 

2 

GNC-002 

Free flight vertical instabilities 

2 

2 


RELIABILITY 



PROP-008 

Main engine burn-through 

2 

5 

PROP-007 

EMA or throttle valve failure during flight 

2 

5 

PROP-010 

Insufficient propellant remaining to complete flight 

2 

5 

PROP-009 

Methane RCS reliability 

3 

3 

STRCT-001 

Landing gear buckling during landing 

2 

3 

SEI-004 

Lack of critical spares delays flight test schedule 

2 

3 

AV-001 

CPU reset during flight 

1 

5 

INSTR-001 

Loss of critical instrumentation during flight 

1 

5 

PWR-001 

Loss of power during flight 

1 

5 


OTHER 



SEI-005 

Weather 

4 

2 


> 

JC 

D) 

X 


> 

0 


_0 

_Q 


O 

CL 


> 

0 

c 

3 

> 

JC 

D) 

X 



Minor impact 

Flight test 

Significant 

Unable to 


needs to be 

delay but 

complete test 


repeated or 
delay to 
flight 
schedule 

recoverable 

campaign 
(loss of 
mission) - 
major damage 
or unable to 
meet perf. req. 


Loss of 
vehicle 
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Morpheus System Overview 



MORPHEUS 



GROUND SYSTEMS EQUIPMENT 

Mechanical, Fluid, Electrical 




MORPHEUS VEHICLE 


FLIGHT OPERATIONS 

TC, OPR, RSO, Prop, GN&C, ALHAT, 

APS, DPI, FM 



Like any planetary launch and landing vehicle, Morpheus includes 
a vehicle, subsystems, operations, and ground systems 
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Morpheus 1.5 Vertical Testbed (VTB) 



MORPHEUS 



LOX 

tanks (x2) 


Methane RCS 
Engines (x4) 


Gimbaled 

Hazard 

Detection 

System 

(HDS) 


-9 ft 


Cold Gas RCS 
Jets (x4) 


GN&C 

Components 


ALHAT Computing 
and Power 
Components 


Avionics and 
Power Unit 
(APU) 


Weight 

Dry: 2245 lb 

70-sec flight: 1700 lb prop 
90-sec flight: 2000 lb prop 

Dimensions 

~9' high, ~10' wide 

Engine 

Film-cooled, 
LOX/methane 5:1 
throttling engine 
4400 Ibf (HD4) 
5000 Ibf (HD5) 

Navigation 

SIGI, LN-200 IMUJavad 
GPS, Acuity laser altimeter 

CPU 

AITech S900 CompactPCI 
with a PowerPC 750 
Processor 

Software 

Flight software uses 
GSFC's Core Flight 
Software; C code: total 
SLOCs 238K (166K SLOCs 
are CFS) 

ALHAT 

Flash lidar (including 
gimbal, dedicated IMU, 
compute electronics, and 
dedicated power), doppler 
velocimeter, laser 
altimeter 
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